InstallService
PPPP
QQQQ
Static task
static1
Behavioral task
behavioral1
Sample
0499cecffd26de2a4d3c460da2af1d69_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0499cecffd26de2a4d3c460da2af1d69_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0499cecffd26de2a4d3c460da2af1d69_JaffaCakes118
Size
36KB
MD5
0499cecffd26de2a4d3c460da2af1d69
SHA1
bcfbb98e5872d9114ad6e156a67e281beaa95348
SHA256
e944ece4a7eac8a3fe24b875154dce6eafb273249911daaa4caff1a748e5ca60
SHA512
98972716dde82b03c8d4caf9d2b945cd6a3a43cf93435d6cca3ff31eafe439ce21be8e345d82d1abf3144a98a631540aeb1f204c65afc4add8c0af2691e72fcc
SSDEEP
768:crJpoklrn2tRot780uQdh8oMFlckiBdQz3WqYhV:ut78+8oO1iLhV
Checks for missing Authenticode signature.
resource |
---|
0499cecffd26de2a4d3c460da2af1d69_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
lstrcmpA
Sleep
lstrlenA
GetTickCount
GetFileSize
ReadFile
CreateFileA
lstrcpynA
DeleteFileA
MultiByteToWideChar
GlobalFree
GlobalUnlock
CreateToolhelp32Snapshot
GlobalLock
GlobalAlloc
GetTempPathA
CreateThread
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
Process32First
lstrcmpiA
Process32Next
CloseHandle
VirtualProtect
IsBadReadPtr
lstrcpyA
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
OutputDebugStringA
PostThreadMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetSystemMetrics
EnumWindows
GetWindowTextA
IsIconic
GetActiveWindow
ReleaseDC
GetDC
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
SetForegroundWindow
ShowWindow
IsWindowVisible
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
CreateDCA
GetDeviceCaps
DeleteDC
GetObjectA
GetDIBits
RealizePalette
SelectPalette
CreateCompatibleBitmap
GdipCloneImage
GdipDisposeImage
GdipFree
GdiplusStartup
GdipAlloc
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpEndRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
strstr
free
malloc
atoi
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
memmove
_except_handler3
_local_unwind2
InstallService
PPPP
QQQQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ